General
- Target 2026-08-04_463d6b26adb7c70efec98fa69705589e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 27.1MB
- Sample260804-td8rsshq8y
- SHA256 baacd1f3ded6380b5c39ebd5a904f5ac170e01fd7464ab38f3cce59ec98f3760
- MD5 463d6b26adb7c70efec98fa69705589e
- SHA1 5759e97424087fa9a16c4522778855127d6af3ab
- SHA512 16334c8731da6139412807e81201fd2e7ad623c102e450244d44a1f712a8d5a332d5f936cc3081fe1d997831b365dd13a81b6234157bc28fbd1c8291c3ca79c1
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzSp8Vb618U68Vbb8Vb618U68B:2cD2cDIEU8IBJSacD2cDIEU8IBJS1
- TLSH T1CD579D16F6A440F5E17B953489A69232EB72BC120B3187CF5364F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_463d6b26adb7c70efec98fa69705589e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_463d6b26adb7c70efec98fa69705589e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_463d6b26adb7c70efec98fa69705589e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 27.1MB
- SHA256 baacd1f3ded6380b5c39ebd5a904f5ac170e01fd7464ab38f3cce59ec98f3760
- MD5 463d6b26adb7c70efec98fa69705589e
- SHA1 5759e97424087fa9a16c4522778855127d6af3ab
- SHA512 16334c8731da6139412807e81201fd2e7ad623c102e450244d44a1f712a8d5a332d5f936cc3081fe1d997831b365dd13a81b6234157bc28fbd1c8291c3ca79c1
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzSp8Vb618U68Vbb8Vb618U68B:2cD2cDIEU8IBJSacD2cDIEU8IBJS1
- TLSH T1CD579D16F6A440F5E17B953489A69232EB72BC120B3187CF5364F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry